{"id":1318477,"url":"https://alion.io/job/cmcglobal-senior-cloud-security-devsecops-specialist-aws-azure-gcp","title":"Senior Cloud Security / DevSecOps Specialist (AWS | Azure | GCP)","company":{"id":3827704,"name":"CMC Global","domain":"cmcglobal.com.vn","url":"https://alion.io/company/cmcglobal","size_band":"201-500","is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"C","score":61,"open_postings":118,"ghost_share":0.653,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vietnam"],"countries":["VN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":43000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Bicep","optional":true},{"name":"CloudFormation","optional":true},{"name":"Terraform","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-08-05T07:36:18Z","employer_posted_date":"2026-09-26","last_verified_at":"2026-10-27T04:11:14Z","board_verified":true,"closed_at":null,"days_open":82,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":82},"description":"JOB DESCRIPTION\nWe are looking for an experienced Cloud Security / DevSecOps Specialist to strengthen cloud security posture across large-scale multi-cloud environments. You will drive remediation initiatives, improve cloud security governance, and collaborate with engineering teams to eliminate security risks while enabling secure software delivery.\nThis role is ideal for security professionals who enjoy solving complex cloud security challenges, working with modern cloud-native technologies, and partnering with global engineering teams.\nKey Responsibilities\nLead end-to-end remediation of cloud security findings across enterprise-scale cloud environments. \nEnsure remediation activities meet defined SLA targets while maintaining security best practices. \nIdentify, prioritize, and resolve cloud security misconfigurations across AWS, Azure, and GCP. \nImprove Identity & Access Management (IAM) security through CIEM practices, including: \nExcessive permission remediation \nLeast privilege implementation \nEntitlement governance \nStrengthen Kubernetes security by implementing and maintaining: \nAdmission controllers \nPolicy enforcement \nCluster hardening and remediation \nImprove container security by identifying and remediating vulnerabilities in both container images and running workloads. \nDetect and remediate security issues within serverless platforms. \nCollaborate closely with DevOps, Platform Engineering, and Security teams to embed security into cloud delivery pipelines. \nSupport continuous improvement of cloud security posture through automation and security best practices\nREQUIREMENTS\nMust Have\n5+ years of experience in Cloud Security, DevSecOps, or Cloud Infrastructure Security. \nProven experience driving enterprise-scale remediation of cloud security non-compliances. \nStrong track record delivering remediation activities within SLA commitments. \nDeep expertise in Cloud Infrastructure Entitlement Management (CIEM), including: IAM risk management \nExcessive permission analysis \nEntitlement governance \n\nHands-on experience securing Kubernetes environments (KSPM), including: Admission Controllers \nPolicy Enforcement \nCluster remediation \n\nStrong understanding of container security, runtime protection, and vulnerability remediation. \nExperience identifying and remediating serverless security misconfigurations. \nStrong hands-on experience across multiple cloud platforms: AWS \nMicrosoft Azure \nGoogle Cloud Platform (GCP) \n\nExperience working with modern DevSecOps and cloud security practices. \nPreferred Qualifications\nExperience using Wiz Cloud Security Platform. \nFamiliarity with Infrastructure as Code (Terraform, CloudFormation, Bicep). \nKnowledge of CSPM, CNAPP, CWPP, and cloud-native security tooling. \nRelevant cloud security certifications (AWS Security Specialty, Azure Security Engineer, GCP Security Engineer, CISSP, CCSP) are advantageous. \nBENEFITS\nOpportunity to work on enterprise-scale cloud security initiatives. \nExposure to modern cloud-native security technologies. \nCollaboration with global engineering and security teams. \nHybrid working environment. \nCompetitive compensation and professional development opportunities.\nTraining and career development opportunities. \nPackage: 12salary month + PerformanceBonus + Extra package: 16 Mil /employee/year (Bonus at: Tet, New Year, CMC Corp’s birthday, 2/9 and Tet’s gift, Middle-Autumn gift, …) \nOpportunity to approach newest technology trends; development of your career within an international Company \n20-day paid annual leave\nSalary review 2 times/year or on excellent performance \nCompany’s labor policy completely pursuant to Vietnamese labor legislation plus other \nBenefits offered by the company (AON care premium, Company trip, Holiday, Sum-up, etc) \nWorking time: 8h/day (from Monday to Friday) \nHOW TO APPLY\nPlease send your application via email: \n*By submitting your application to , you acknowledge that you have read, understood, and agreed to CMC Global’s REGULATIONS ON THE PROTECTION OF CANDIDATES’ PERSONAL INFORMATION.\nThe post Senior Cloud Security / DevSecOps Specialist (AWS | Azure | GCP) appeared first on CMC Global.","description_format":"text","description_chars":4204,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Hybrid work","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-09-26T20:13:45Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.439,"p_room":0.28,"age_days":82,"expected_fill_days":35,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/cmcglobal-senior-cloud-security-devsecops-specialist-aws-azure-gcp","json_url":"https://alion.io/job/cmcglobal-senior-cloud-security-devsecops-specialist-aws-azure-gcp.json","meta":{"generated_at":"2026-10-27T07:22:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7920,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3827704},"rest":"https://alion.io/mcp/rest/get_company?id=3827704"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcmcglobal-senior-cloud-security-devsecops-specialist-aws-azure-gcp"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcmcglobal-senior-cloud-security-devsecops-specialist-aws-azure-gcp"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcmcglobal-senior-cloud-security-devsecops-specialist-aws-azure-gcp"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cmcglobal-senior-cloud-security-devsecops-specialist-aws-azure-gcp\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcmcglobal-senior-cloud-security-devsecops-specialist-aws-azure-gcp"}]}